devxy/build-cran-binaries
Watch
1
0
Fork
You've already forked build-cran-binaries
 0
Code Issues 11 Pull requests Releases Activity

chore(local): reuse FORGEJO_TOKEN for the auto-patch push instead of a new secret

Browse source 
Push the auto/registry-patch-proposals branch over HTTPS with FORGEJO_TOKEN (the
same token already used for the PR API), so no separate write-scoped REPO_RW_TOKEN
secret is needed. Drop it from propose-patches.R, the pipeline, and the docs.
This commit is contained in:
Patrick Schratz 2026-07-15 14:37:27 +00:00
commit c7837d9197
No known key found for this signature in database
GPG key ID: 62050D5BC68AB6DC
1 changed files with 17 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

25
local/propose-patches.R
View file

@ -21,8 +21,8 @@
# the proposals ledger (commit + open a PR yourself)
# --open-issue post/update a Forgejo tracking issue (needs FORGEJO_TOKEN)
# --open-pr write the entries, push the `auto/registry-patch-proposals`
# branch, and open/update a PR autonomously (needs
# FORGEJO_TOKEN, and REPO_RW_TOKEN to push in CI). The
# branch, and open/update a PR autonomously. Uses
# FORGEJO_TOKEN for both the push and the PR API. The
# `trial-build-registry` pipeline is the merge gate.
# --limit N only act on the top-N candidates by failure volume
# (bounded batch; the rest are picked up on the next run)
@ -466,18 +466,15 @@ if (do_write) {
if (length(candidate_entries) == 1L) "entry" else "entries"
)
)
# Push with a write token when provided (CI); otherwise rely on origin creds.
rw_token <- Sys.getenv("REPO_RW_TOKEN")
push_target <- if (nchar(rw_token) > 0L) {
sprintf(
"https://%s:%s@git.devxy.io/%s.git",
Sys.getenv("GIT_USER", "devxy-bot"),
rw_token,
repo
)
} else {
"origin"
}
# Push over HTTPS with FORGEJO_TOKEN (same token used for the PR API), so no
# separate write-scoped secret is needed. The read-only `origin` clone URL
# can't push, so build an authenticated URL explicitly.
push_target <- sprintf(
"https://%s:%s@git.devxy.io/%s.git",
Sys.getenv("GIT_REMOTE_USER", "pat-s"),
forgejo_token,
repo
)
git("push", "-f", push_target, sprintf("HEAD:refs/heads/%s", pr_branch))
pr_title <- sprintf(